Privacy Policy

1.Who we are

Vaibhav Hiwase (Sole proprietor) operates TextView.AI from India, and decides how the personal data described here is used.

2.What we collect

• Account details. Your name, email address, a hash of your password (never the password itself), and a profile picture or phone number if you add one.
• Documents and what we produce from them. The file name, type and size; the extracted text of each page; details found while reading it, such as a title, summary, page summaries and identifiers; the knowledge graphs, chat messages and answers you create; and any thumbs-up or thumbs-down rating you give an answer.
• Usage and credits. Pages processed, AI tokens used, the credits each request cost, when it ran, your credit balance, and records of credits bought.
• API keys. A one-way hash of each key (not the key itself), its first characters so you can recognise it, when it was last used, and the IP address it was last used from.
• Notification settings. The email address or phone number you add to a notification rule. Text messages are not sent yet: phone numbers are only stored.
• Messages to us. The name, email address and message you send through the contact form, which reaches our email inbox.
• Technical data. IP addresses and request details in server logs, and sign-in events with the email address used. We look up the approximate location (city and country) and the network operator of the IP addresses that reach us, so we can tell ordinary visitors apart from automated scanning. We do not look up addresses belonging to our own systems.
• Payments. Card payments are not open yet. When they are, card details will go directly to our payment processor. We will receive and keep the amount, the credits bought, the payment status and the processor's references, never your full card number or security code.

3.How we use it

We use this data to:

• process your documents, answer your questions and show your history and activity;
• charge credits for what you use, apply rate limits and prevent abuse;
• keep the service available and secure — we review traffic to identify automated scanning, attempts to find security holes, and spam, and we may block or challenge the networks they come from. This is why we look up the approximate location and network operator of an IP address: a browser that claims to be a phone but arrives from a hosting company is usually a script, and that distinction is what keeps the service working for everyone else;
• send account emails (email verification and password reset) and the notification emails you set up;
• reply to your messages;
• keep the service secure and fix problems;
• meet our legal obligations.

We do not use your documents or chats to train AI models. We do not sell your personal data or share it for advertising, and we do not send marketing emails.

4.Who receives it

We share data only with the services that run TextView.AI:

• AI and OCR providers receive the documents you submit (their content or page images) and the questions you ask with the document text needed to answer them, to process each request.
• Our cloud hosting provider runs the servers and database where your data is stored.
• Our email provider delivers the emails described above.
• Our payment processor, once card payments open, receives what it needs to take a payment.
• Our network provider (Cloudflare) sits in front of this site, so every request passes through it. It filters attacks and provides the country an address is in.
• An IP lookup service receives IP addresses that reach us — not your name, account or anything you have uploaded — and returns the approximate city and the network operator, which we use to tell visitors from automated scanning as described above.
• Your browser's speech service, only if you dictate a question with the microphone button. Your browser records the audio and sends it to its own speech service to turn into text — Chrome uses Google's. That recording never passes through our servers and we never receive it. Do not dictate anything you would not hand to your browser vendor; type it instead.

These providers handle data under their own terms and privacy policies, and some of them process data outside India. We may also disclose data when the law requires it, or to establish or defend a legal claim.

5.How long we keep it

• The files you upload. We do not keep the file after it has been processed. Processing results for each page, which can include images cut from the page, are cached for up to 72 hours so the same page is not charged twice, then deleted automatically.
• Extracted text, document details, knowledge graphs, chats and ratings. Kept until you delete the document, its project or your account.
• Account details, usage, API keys, notifications and credit records. Kept until you delete your account. You can also delete notifications and revoke API keys at any time.
• Payment records. Our payment processor keeps its own records, and we keep payment records for as long as the law requires us to, even after an account is deleted.
• Messages to us. Kept in our email inbox until we delete them.
• Sign-in records and server logs. Each successful sign-in is recorded with the address it came from, the browser or app used, and which sign-in method was used. Those records are deleted after 90 days, and immediately if you delete your account. Server access logs are kept for 30 days. We use both to tell real visitors apart from automated scanning, as described above.
• Server logs. We do not yet delete them on a fixed schedule. They are used only to run and secure the service.

6.Security

Connections to TextView.AI are encrypted with HTTPS. Passwords are stored as bcrypt hashes and API keys as one-way hashes, and access to our servers is restricted. Your sign-in is kept in your browser's local storage and ends after 60 minutes without activity, or 14 days after you sign in, whichever comes first, so sign out on shared devices. No system is completely secure, and we cannot guarantee that your data will never be accessed without permission.

7.Your choices and rights

• You can see and change your name, phone number and profile picture in Settings.
• You can delete individual documents, projects and notifications, and revoke API keys.
• You can delete your account in Settings. That permanently removes your account, documents, knowledge graphs, chats, usage records, API keys, projects and notifications from our database, along with your profile picture. Cached processing results expire within 72 hours. Any credits left on the account are lost.
• There is no self-service export yet. To get a copy of your data, to correct something you cannot change yourself, or to raise any other privacy request, email [email protected] from your account's email address.

8.Cookies and local storage

TextView.AI does not set cookies. It uses your browser's local storage to keep you signed in and to remember preferences such as your current project, display currency and reply length. We use Cloudflare Web Analytics to count page views and measure page speed across the site, including when you're signed in. It sets no cookies. We do not use advertising trackers. When card payments open, the checkout page will be run by our payment processor, which may use its own cookies.

9.Children

TextView.AI is not meant for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

10.Grievance officer

Under the Information Technology Act, 2000 and the rules made under it, the grievance officer for TextView.AI is:

We acknowledge a grievance within 3 days of receiving it and resolve it within 30 days.

11.Changes to this policy

We will post any update on this page with a new date, and tell you about important changes by email or in the application before they apply.